Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
File:                     pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json)
Hash identifier:          6OiOW+et07N3yV02slhJlgN6v5ot+Vl5LM7mAh/ynUk=
Subject key identifier:   99:2A:98:38:0F:3C:2C:47:29:8A:01:11:E2:4D:43:03:DD:F1:88:7E
Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
Certificate issuer:       /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
Certificate serial:       028A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
Manifest number:          0282
Signing time:             Wed 29 Jul 2026 02:54:05 +0000
Manifest this update:     Wed 29 Jul 2026 02:54:05 +0000
Manifest next update:     Wed 05 Aug 2026 02:54:05 +0000
Files and hashes:         1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: cR1GiYyU/GppNORMFjqmiRVab9GTbMleOUTSqnzWGf8=)
                          2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: BbJgy4+r5xqumD47JYCsm8jlMt7XgJ8HLQRHYGqlUlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
        Validity
            Not Before: Jul 29 02:54:05 2026 GMT
            Not After : Aug  5 02:54:05 2026 GMT
        Subject: CN=6a696b4d-9940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:1e:dd:54:44:66:2d:77:fe:d4:a5:fd:3a:
                    43:56:4a:41:10:52:38:1e:aa:1d:20:35:72:28:42:
                    ae:b7:70:9c:a4:2e:2c:8c:bd:4a:4c:0c:d1:c0:6f:
                    02:fd:5e:3c:d4:85:60:fd:df:d8:63:f2:4b:73:cb:
                    cb:a5:9d:c6:99:cb:83:c4:2d:6a:46:bc:5d:c7:95:
                    72:78:e6:07:ae:d5:7d:b8:aa:c7:41:f4:77:00:c2:
                    9d:95:f0:97:25:b2:80:6b:5f:e2:28:d7:15:68:95:
                    f1:b4:77:c0:9b:76:55:a2:bf:8d:ac:16:6c:c1:91:
                    d9:48:46:4c:f3:a3:0f:e9:43:10:26:09:8d:79:84:
                    f0:8a:62:01:f7:08:cb:42:a4:f8:5b:65:ec:38:65:
                    1d:5d:ad:de:47:a0:e1:31:a1:f4:25:9d:54:a7:20:
                    d1:0f:44:0c:f0:e5:2c:da:86:5c:0e:1f:98:98:93:
                    2a:66:db:29:f9:fd:27:53:38:75:57:e8:ff:47:44:
                    10:e4:9f:d3:fc:f1:ff:af:87:16:89:cb:e7:70:c2:
                    3b:29:9c:24:fa:e0:c5:10:16:2c:e0:1c:86:76:01:
                    d0:2b:f5:56:73:a2:40:6e:58:c0:71:a1:0a:db:04:
                    bc:e9:5c:a6:30:0a:91:d5:e1:c0:f1:8c:48:d9:1e:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2A:98:38:0F:3C:2C:47:29:8A:01:11:E2:4D:43:03:DD:F1:88:7E
            X509v3 Authority Key Identifier:
                keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fa:66:0f:fc:7c:4e:2d:2f:ee:f4:a0:23:6e:24:07:54:8e:
         9a:b0:aa:69:53:c3:77:bd:72:45:9c:ed:6e:76:c0:f2:d7:34:
         28:52:62:4a:49:22:36:47:9f:d5:50:76:fe:63:1f:3d:e8:97:
         c1:77:20:16:e6:d5:d3:55:6c:bc:fc:64:6d:39:dd:84:81:a0:
         08:6b:44:2c:d4:90:00:86:4f:3c:8b:a9:d9:9c:a8:3c:8c:c2:
         a2:8a:bd:94:0e:99:1d:ec:da:69:e4:1c:b0:da:03:51:f8:65:
         f8:bb:a1:2b:dc:1f:ca:ae:69:f2:7a:de:04:d4:4a:30:08:d0:
         b0:2b:c1:b6:3b:29:42:94:10:da:fe:e7:b4:7e:17:f4:1a:8c:
         34:77:39:79:36:08:dd:c6:65:59:93:36:72:47:8c:64:2a:8c:
         02:0d:5a:eb:5b:4b:bf:1b:f5:c2:5d:11:ec:53:33:b2:80:ba:
         37:74:7a:d9:d2:7b:08:93:86:01:90:b5:9d:b4:6b:34:4a:a0:
         3b:61:f7:03:a9:71:e7:4d:ce:b4:23:de:0b:e6:1a:90:fb:b7:
         26:36:a7:dd:73:99:0b:ce:3a:c0:f9:a9:04:85:97:f6:00:3b:
         86:6f:55:ea:1f:b2:b4:af:2c:0d:bd:b8:18:7e:0a:2d:82:ff:
         cf:24:c8:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRBMTMxMTAvBgNVBAUTKEE1RkIzMUQ0RDUxMjVGN0M5QUFFNTAwMzM1QTQ4MEZD
Nzc5MDhGMTUwHhcNMjYwNzI5MDI1NDA1WhcNMjYwODA1MDI1NDA1WjAYMRYwFAYD
VQQDEw02YTY5NmI0ZC05OTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAye0e3VREZi13/tSl/TpDVkpBEFI4HqodIDVyKEKut3CcpC4sjL1KTAzRwG8C
/V481IVg/d/YY/JLc8vLpZ3GmcuDxC1qRrxdx5VyeOYHrtV9uKrHQfR3AMKdlfCX
JbKAa1/iKNcVaJXxtHfAm3ZVor+NrBZswZHZSEZM86MP6UMQJgmNeYTwimIB9wjL
QqT4W2XsOGUdXa3eR6DhMaH0JZ1UpyDRD0QM8OUs2oZcDh+YmJMqZtsp+f0nUzh1
V+j/R0QQ5J/T/PH/r4cWicvncMI7KZwk+uDFEBYs4ByGdgHQK/VWc6JAbljAcaEK
2wS86VymMAqR1eHA8YxI2R7ypQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkqmDgP
PCxHKYoBEeJNQwPd8Yh+MB8GA1UdIwQYMBaAFKX7MdTVEl98mq5QAzWkgPx3kI8V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEExMy9CQjZDOUI1NEI5
ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gzeWFybEFETmFTQV9IZVFq
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Bmc3gxTlVTWDN5YXJsQUROYVNBX0hlUWp4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEExMy9CQjZDOUI1NEI5ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gz
eWFybEFETmFTQV9IZVFqeFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVfpmD/x8Ti0v7vSgI24kB1SOmrCqaVPDd71yRZztbnbA8tc0KFJiSkkiNkef
1VB2/mMfPeiXwXcgFubV01VsvPxkbTndhIGgCGtELNSQAIZPPIup2ZyoPIzCooq9
lA6ZHezaaeQcsNoDUfhl+LuhK9wfyq5p8nreBNRKMAjQsCvBtjspQpQQ2v7ntH4X
9BqMNHc5eTYI3cZlWZM2ckeMZCqMAg1a61tLvxv1wl0R7FMzsoC6N3R62dJ7CJOG
AZC1nbRrNEqgO2H3A6lx503OtCPeC+YakPu3Jjan3XOZC846wPmpBIWX9gA7hm9V
6h+ytK8sDb24GH4KLYL/zyTIrg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:13:30 2026 by rpki-client